When we talk about “cookies” here, we are also covering session storage, local storage, IndexedDB, technical browser cache, local app identifiers, and similar mechanisms used for authentication, security, preferences, measurement, or campaigns.
1. Technologies covered
- Essential: authenticated session, abuse protection, CSRF, technical routing, minimum interface persistence, and memory of the privacy choice itself.
- Functional: viewing preferences, interface conveniences, and context restoration that are not strictly necessary for the first page load.
- Analytics: usage measurement, diagnostics, and product indicators that are not indispensable for the current session.
- Marketing: campaigns, promotional personalization, retargeting, and optional advertising trackers.
2. How control works
The site and app show a preference manager with three simple paths: accept all, keep only what is essential, or choose specific categories. That decision is stored with the policy version, selected country or region, and a timestamp so we can present the notice again when the legal basis or wording changes in a relevant way.
3. Storage categories
Authentication, security, stability, abuse prevention, minimum account preferences, and storage of the consent choice itself.
Interface settings, filters, preferred language, and conveniences that improve navigation but can wait for authorization.
Aggregated behavior measurement, feature diagnostics, performance, and product prioritization.
Tracker-based promotional communication, commercial personalization, and media integrations that are not strictly necessary.
4. Operating baseline by country
The profiles below summarize the logic we use by jurisdiction. They do not replace contracts, sector analysis, or local legal review, but they form the practical baseline behind the banner and the preferences panel.
LGPD and ANPD Cookie Guidance
We apply stronger transparency and affirmative choice for non-essential technologies.
How we operate
Strictly necessary cookies may operate on a compatible legal basis; preferences, analytics, and marketing remain off until an affirmative choice is made.
Highlighted rights
- Confirmation of processing and access to personal data.
- Correction, anonymization, blocking, or deletion where applicable.
- Portability and information about data sharing.
- Withdrawal of consent where applicable.
Practical note
Preferences can be reviewed at any time in the privacy manager.
Personal Data Protection Law 25,326
We operate with clear notice and free, express, informed consent for optional trackers.
How we operate
Non-essential technologies remain disabled until the user takes an affirmative action.
Highlighted rights
- Access to personal data.
- Rectification, updating, and deletion.
- Clear prior information about purpose and controller.
Practical note
We keep the notice prominent and the language objective before enabling optional categories.
Law 7593/2025 and the Paraguayan data protection framework
We already adopt a conservative standard of prior, free, informed, and unequivocal consent.
How we operate
Optional trackers remain off until an affirmative choice is made, also considering Paraguay’s legal transition period.
Highlighted rights
- Access, rectification, and deletion where applicable.
- Objection and review of informed preferences.
- Clear information about purpose and retention.
Practical note
Law 7593/2025 provides for a legal transition, so we already apply a more protective experience.
Law 18,331 and Decree 414/009
We prioritize prior, express, precise, and unequivocal information about the use of tracking technologies.
How we operate
Non-essential categories depend on affirmative choice and can be reviewed at any time.
Highlighted rights
- Prior information about purpose and controller.
- Access, rectification, and deletion.
- A simple channel to review preferences.
Practical note
The notice highlights purpose, technical categories, and ways to exercise rights.
LFPDPPP and INAI guidance
The privacy notice must cover purposes, ARCO rights, and the use of tracking technologies.
How we operate
Preferences, analytics, and marketing remain off until a favorable choice is made and can be disabled later.
Highlighted rights
- Access, Rectification, Cancellation, and Objection (ARCO).
- Information about tracking technologies.
- Clear mechanisms to review or disable optional categories.
Practical note
The preference layer complements the privacy notice and browser controls.
FTC and state laws such as CCPA/CPRA
Because there is no single federal banner rule, we adopt stronger transparency, user choice, and a more restrictive baseline.
How we operate
Non-essential cookies can be refused; where technically applicable, signals such as Global Privacy Control keep optional categories off until a manual choice is made.
Highlighted rights
- Know/access, delete, and correct where applicable.
- Opt out of sale/share or targeted advertising where applicable.
- Limit the use of sensitive data where the law applies.
Practical note
The U.S. scenario is fragmented by state, so we use a more conservative experience than the federal minimum.
Conservative international baseline
If the region cannot be inferred with confidence, we keep only what is necessary until you choose otherwise.
How we operate
Non-essential categories stay off by default until affirmative consent is given.
Highlighted rights
- Access to information about categories and purposes.
- Review of preferences at any time.
- A dedicated contact path for privacy matters.
Practical note
This profile covers traffic whose country could not be identified with enough confidence.
5. Browser signals and continuous review
When more restrictive technical signals are available, such as Global Privacy Control, we treat that indication conservatively, especially in the United States profile. That does not prevent a later manual choice by the user, but it avoids automatically enabling optional categories where the legal context requires extra caution.
6. What still depends on contractual or sector design
Some scenarios require additional layers beyond this banner, such as third-party advertising integrations, regulated sectors, controller decisions imposed by the customer, and countries or states outside the list above. In those situations, the baseline here still applies, but it may be complemented by notices, contracts, or specific flows.
7. Contact and preference review
You can review your preferences through the privacy manager shown on the site and in the app. For specific data protection requests, use the contact page or the applicable contractual channels.